Sam Hartman [Tue, 13 Jan 2009 22:57:42 +0000 (22:57 +0000)]
Patch from Luke Howard to:
* Accept both CFX and non-CFX tokens all the time on acceptor
* Only produce an acceptor subkey if you are using cfx or dce or negotiating up to cfx
Additional changes from Sam Hartman:
* do not assume that the ticket key type (server key) is a valid target for negotiation: the client may not support it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21742
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 13 Jan 2009 21:54:45 +0000 (21:54 +0000)]
/tmp/3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21741
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 13 Jan 2009 19:43:18 +0000 (19:43 +0000)]
FreeBSD compiler errors out on an error "zero or negative size array"
after setting up an array with no elements.
ifdef out array declarations and code that uses it until there are entries.
Affects: krb5_gss_inquire_cred_by_oid_ops and
krb5_gss_set_sec_context_option_ops which would return an error in any
case as here are no entries in the arrays.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21740
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 12 Jan 2009 21:18:45 +0000 (21:18 +0000)]
Add a call to limit_string that appears to have been accidentally removed
somewhere along the mskrb-integ branch
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21729
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 12 Jan 2009 21:03:02 +0000 (21:03 +0000)]
Remove gss_export_name_object and gss_import_name_object.
These are not standard interfaces, are not used by our tree
and were added because they might be useful but ended up not being used.
The stubs in gssapi.hin remain as they were shipped with previous releases.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21728
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 12 Jan 2009 19:59:16 +0000 (19:59 +0000)]
Patch from Luke Howard:
Previously when using the kdb keytab, there was a check to confirm that the server
was supported as a server and that attackers
could not force an enctype downgrade.
Add these to kdc_get_server_key
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21727
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 12 Jan 2009 19:43:13 +0000 (19:43 +0000)]
Patch from Luke Howard
There's a superfluous check in kdc_util.c; ad_entry is always non NULL
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21726
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 12 Jan 2009 19:43:07 +0000 (19:43 +0000)]
Restore behavior of returning KRB5APP_ERR_BAD_INTEGRITY from
preauth methods.
This creates a problem for Windows clients, but not doing it creates a problem for MIT clients.
Today our KDC is more likely to be used with MIT clients, but we need to examine this issues in more detail.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21725
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Mon, 12 Jan 2009 19:40:37 +0000 (19:40 +0000)]
Check the return code from krb5int_clean_hostname as the sanity verification of the hostname might fail
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21724
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 12 Jan 2009 18:29:42 +0000 (18:29 +0000)]
Add message hash support to the replay interface, using extension
records (with an empty client string) to retain compatibility with old
code. For rd_req, the ciphertext of the authenticator (with no ASN.1
wrapping) is hashed; for other uses of the replay cache, no message
hash is used at this time.
This commit adds a command-line tool for testing the replay cache but
does not add any automated tests.
ticket: 1201
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21723
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 9 Jan 2009 01:42:37 +0000 (01:42 +0000)]
Follow "off-path" TGT referrals
ticket: 5627
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21720
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 9 Jan 2009 00:07:50 +0000 (00:07 +0000)]
Remove conflict marker; restore broken copyright line
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21719
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 7 Jan 2009 18:13:30 +0000 (18:13 +0000)]
kdb/keytab.c: map KRB5_KDB_NO_MATCHING_KEY to KRB5_KT_KVNONOTFOUND.
At least in cases other than tgts, this code handles its own enctype matching, so kvno not found is the only
thing that produces the no matching key error.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21718
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 7 Jan 2009 00:11:40 +0000 (00:11 +0000)]
Don't create include/kerberosIV on installation
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21717
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 6 Jan 2009 23:45:23 +0000 (23:45 +0000)]
Add support for referral null realms and use the default realm as krb5_rd_req_extended does
ticket: 5954
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21716
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 6 Jan 2009 23:45:17 +0000 (23:45 +0000)]
Remove ksu's own implementation of krb5_verify_init_creds now that it is not used
ticket: 5954
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21715
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 6 Jan 2009 23:44:56 +0000 (23:44 +0000)]
Ksu should call krb5_verify_init_creds instead of using its own function.
This was prompted by a desire for ksu to work without a domain_realm mapping for the local server, but the duplication of code is bad anyway.
ticket: 5954
Status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21714
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 6 Jan 2009 22:52:50 +0000 (22:52 +0000)]
Set RELTAIL back to "trunk"
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21713
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 6 Jan 2009 22:32:30 +0000 (22:32 +0000)]
Patch from Luke Howard
to make an explicit call to check the ACL for s4u delegations rather than relying on tl-data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21712
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 6 Jan 2009 21:48:24 +0000 (21:48 +0000)]
be a little looser in checking for tail output
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21711
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 6 Jan 2009 21:47:05 +0000 (21:47 +0000)]
remove unused file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21710
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Tue, 6 Jan 2009 20:44:01 +0000 (20:44 +0000)]
Clean up many error-condition leaks of the server handle in the
kadmind server stubs.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21709
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Tue, 6 Jan 2009 20:24:09 +0000 (20:24 +0000)]
In kadmin, remove a bunch of checks for handle being NULL (some old,
some introduced by the last rev) when it is known from context that
handle is not NULL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21708
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 6 Jan 2009 16:01:56 +0000 (16:01 +0000)]
Fix capitalization
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21707
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 23:29:37 +0000 (23:29 +0000)]
Oops. Don't include openssl install paths from my local machine.
Thanks to Ezra for noticing so quickly.
ticket: 6315
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21706
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 22:56:37 +0000 (22:56 +0000)]
include string.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21705
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 22:56:00 +0000 (22:56 +0000)]
fix missed var rename
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21704
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 22:45:10 +0000 (22:45 +0000)]
Define SWAP16 if not already defined
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21703
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 22:44:41 +0000 (22:44 +0000)]
No C++ style comments in C code please
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21702
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 20:27:53 +0000 (20:27 +0000)]
move generated dependencies out of Makefile.in
Move automatically-generated dependencies into separate files in the
source tree, and take the data out of Makefile.in.
Keep the "make depend" rules for stripping out the dependencies from
Makefile.in, in case some optional directories were missed, but
everything that builds on my UNIX build has been converted.
(Converting a directory just requires creating an empty "deps" file so
that config.status can build the makefile, and then later running
"make depend" in that directory to get the correct content for it.)
Change configure scripts to incorporate the "deps" file when building
each Makefile. This change requires the existence of a file "deps" in
each source directory where we build a makefile, even if there are no
sources for which to compute dependencies; a switch to GNU make would
let us conditionalize that, but we can assess that later.
Update dependencies for the generate Makefile itself to list the deps
file.
This will also require some minor tweaking of the Windows build, to
make it incorporate the new deps file.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21701
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 18:19:32 +0000 (18:19 +0000)]
Build against Python 2.5 as well as 2.3. Long term, should use python-config
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21700
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 17:59:59 +0000 (17:59 +0000)]
fix minor comment typos
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21699
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 5 Jan 2009 17:49:00 +0000 (17:49 +0000)]
fix merge of new openldap notice
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21698
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 5 Jan 2009 05:01:04 +0000 (05:01 +0000)]
ifdef out unused functions that are also missing prototypes.
krb5int_utf8_islower and krb5int_utf8_isupper.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21697
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 5 Jan 2009 04:59:30 +0000 (04:59 +0000)]
Include ucdata/ucdata.h for missing prototypes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21696
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 5 Jan 2009 04:57:56 +0000 (04:57 +0000)]
Include strings.h for memset prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21695
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 3 Jan 2009 23:20:35 +0000 (23:20 +0000)]
Remove support for setting a client flag indicating pkinit is used on the db entry.
I'm reasonably sure that this would belong in a pkinit plugin not in do_as_req.c.
Also, the flag should be documented to indicate what it means--client attempted pkinit? Client succeeded in using pkinit?
I also wonder whether you want a mechanism for a db plugin to figure out all the padata or fast factors that a request is using.
Note that this flag will need to be added back by at least one vendor.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21694
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 3 Jan 2009 23:20:31 +0000 (23:20 +0000)]
xrealm_non_transitive not trust_non_transitive
Kerberos does not imply trust in the existence of a cross-realm key.
Trust is implied when a foreign principal is placed on an ACL: the remote realm
is trusted to authenticate that principal and is trusted
not to confuse one principal with another.
Keep terminology consistent.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21693
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 3 Jan 2009 23:20:26 +0000 (23:20 +0000)]
Remove flags that do not correspond to behavior we support
non_ms_principal would need to be phrased in terms of what behavior is being changed, not client OS.
The pkinit flag would need to be better documented
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21692
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 3 Jan 2009 23:20:19 +0000 (23:20 +0000)]
KDB API should not be public
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21691
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 3 Jan 2009 23:19:42 +0000 (23:19 +0000)]
Merge mskrb-integ onto trunk
The mskrb-integ branch includes support for the following projects:
Projects/Aliases
* Projects/PAC and principal APIs
* Projects/AEAD encryption API
* Projects/GSSAPI DCE
* Projects/RFC 3244
In addition, it includes support for enctype negotiation, and a variety of GSS-API extensions.
In the KDC it includes support for protocol transition, constrained delegation
and a new authorization data interface.
The old authorization data interface is also supported.
This commit merges the mskrb-integ branch on to the trunk.
Additional review and testing is required.
Merge commit 'mskrb-integ' into trunk
ticket: new
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21690
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 3 Jan 2009 12:40:53 +0000 (12:40 +0000)]
With no more fakeka, we don't need the --enable-fakeka option
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21683
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 3 Jan 2009 12:05:58 +0000 (12:05 +0000)]
Remove some unused AC_SUBSTs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21682
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 3 Jan 2009 11:39:17 +0000 (11:39 +0000)]
Remove some unused variables
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21681
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 2 Jan 2009 01:40:41 +0000 (01:40 +0000)]
Rewrite walk_rtree.c to handle hierarchical traversal better and to be
less convoluted. Update test cases.
ticket: 5947
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21659
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 31 Dec 2008 17:25:25 +0000 (17:25 +0000)]
Set auth_context's rcache to NULL after destroying and before calling
krb5_auth_con_free, to avoid crashing when krb5_rc_close tries to run
using a destroyed rcache handle.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21644
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 31 Dec 2008 01:58:49 +0000 (01:58 +0000)]
I don't know what it was that someone else didn't know, but it doesn't
belong in the copyright header.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21642
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 30 Dec 2008 14:04:51 +0000 (14:04 +0000)]
Signed/unsigned fixes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21639
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Dec 2008 05:45:06 +0000 (05:45 +0000)]
Change kpropd_com_err_proc to prototype style, add format attribute
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21637
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Dec 2008 05:42:04 +0000 (05:42 +0000)]
If full resync fails, go into backoff mode
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21636
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 23:01:15 +0000 (23:01 +0000)]
Signed/unsigned fixes and remove unused variable
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21635
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 22:41:27 +0000 (22:41 +0000)]
Fix up warning of suggested parens in assignment in conditional
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21634
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 17:39:29 +0000 (17:39 +0000)]
Add gssrpcint.h to contain prototype for gssrpcint_printf. Include
gcc printf attribute if supported. Include header file and fix up some
of the debugging printf arguments.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21632
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 29 Dec 2008 17:12:54 +0000 (17:12 +0000)]
Revert r21589, and export krb5_get_fallback_host_realm instead
Rationale: Zephyr and AFS both use the Kerberos realm name as the
name of the service realm (AFS realm or Zephyr galaxy). AFS can grab
the Kerberos realm from the ticket being aklogged, but Zephyr is not
necessarily getting credentials at all (you could be sending an
unauthenticated message), and currently finds its answer by looking
up the realm of the server host. Although we can't currently provide
an accurate result for this lookup in the presence of referrals, we do
need to provide enough tools to get as good of an answer as libzephyr
could have gotten before referrals went in.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21631
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 13:37:20 +0000 (13:37 +0000)]
Create a private header file for local functions missing prototypes.
Fix a number of warnning suggesting parenthesis.
Fix a signed/unsigned warning.
Update dependencies.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21627
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 12:36:31 +0000 (12:36 +0000)]
Add prototype for usage. Change invocation of usage to db_usage when using an argument. Include adm_proto.h for prototype for krb5_keysalt_iterate
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21625
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 04:45:36 +0000 (04:45 +0000)]
krb4 removal missed ldap kdb plugin directory
The krb4 removal failed to change the makefile in ldap kdb plugin directory.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21622
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 29 Dec 2008 03:36:57 +0000 (03:36 +0000)]
Handle a number of warnings - including missing prototype,
paraenthesis in conditionals, unused function removal, unused variable
removal.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21621
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sun, 28 Dec 2008 19:55:52 +0000 (19:55 +0000)]
whitespace
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21619
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Wed, 24 Dec 2008 18:48:00 +0000 (18:48 +0000)]
Clean up krb5_get_fallback_host_realm in two respects:
1. It isn't exported from libkrb5 (and no one seems to complain about
that). So give it a krb5int_ name and move its declaration to
k5-int.h. Also stop exporting it from the collected client lib.
2. It returned a list of realms, but its only caller assumes that the
list contains exactly one realm. So just make it return a single
realm.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21589
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Wed, 24 Dec 2008 16:51:33 +0000 (16:51 +0000)]
Add a new fallback host-to-realm heuristic to try the components of the
hostname as domains. The heuristic is off by default and is controlled
by the realm_try_domains variable under libdefaults.
Based on a patch submitted by Mark Phalan from Sun.
ticket: 6031
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21588
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 22 Dec 2008 04:40:39 +0000 (04:40 +0000)]
Collect ticket-request logging calls together in one place for easier
customization.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21564
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 22 Dec 2008 03:49:30 +0000 (03:49 +0000)]
Some cleanup from Shawn Emery: Use INITIAL_TIMER macros instead of
hardcoding values; reset 'gfd' when turning off the alarm.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21563
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 22 Dec 2008 03:12:19 +0000 (03:12 +0000)]
Improvements from Shawn Emery: an extra-verbose mode
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21562
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Fri, 19 Dec 2008 17:14:16 +0000 (17:14 +0000)]
Signed/unsigned fix. The function is called with a sizeof - so unsigned is
fine.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21553
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Thu, 18 Dec 2008 19:28:23 +0000 (19:28 +0000)]
Remove documentation references to krb4 functionality we no longer
have. Remove the krb425 transition guide since we no longer have
compatibility code to assist with a transition.
ticket: 6303
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21545
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Thu, 18 Dec 2008 18:31:16 +0000 (18:31 +0000)]
Remove krb524, lib/des425, lib/krb4, and include/kerberosIV.
Remove krb4 build system references and conditionals.
Move des425 header stuff referenced by des_int.h into des_int.h.
Remove krb4 test cases.
ticket: 6303
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21544
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Thu, 18 Dec 2008 16:21:10 +0000 (16:21 +0000)]
KIM: window settings
Ticket: 6290
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21543
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Thu, 18 Dec 2008 16:09:10 +0000 (16:09 +0000)]
Mem leak fix
Ticket: 6285
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21542
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 20:44:37 +0000 (20:44 +0000)]
another diff test 4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21519
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 20:39:59 +0000 (20:39 +0000)]
another diff test 3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21518
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 20:37:15 +0000 (20:37 +0000)]
another diff test 2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21517
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 20:37:07 +0000 (20:37 +0000)]
another diff test
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21516
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:46:59 +0000 (18:46 +0000)]
test mailing diffs 6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21515
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:44:40 +0000 (18:44 +0000)]
test mailing diffs 5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21514
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:40:49 +0000 (18:40 +0000)]
test mailing diffs 4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21513
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:26:44 +0000 (18:26 +0000)]
test mailing diffs 3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21512
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:25:04 +0000 (18:25 +0000)]
test mailing diffs 2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21511
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 17 Dec 2008 18:25:00 +0000 (18:25 +0000)]
test mailing diffs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21510
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 17 Dec 2008 03:42:12 +0000 (03:42 +0000)]
Move prototypes needed in multiple files to misc.h instead of
declaring extern in each .c file. This will ensure that definitions
are consistent. Moved prototypes include: load_badauth,
setup_gss_names, krb5_iprop_prog_1, kiprop_get_adm_host_srv_name.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21493
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 16 Dec 2008 21:27:10 +0000 (21:27 +0000)]
Add prototype for kadm5_init_iprop. FOr the client - adds a dummy argument
which is ignored.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21480
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 16 Dec 2008 20:15:46 +0000 (20:15 +0000)]
Fix memory leaks in sam and ldap handler testing - there is still a leak w/ ldap
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21479
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 20:42:07 +0000 (20:42 +0000)]
Add svn:ignore properties for some files created by dejagnu tests
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21453
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 20:37:39 +0000 (20:37 +0000)]
Remove krb4 code in libkrb5
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21452
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 20:31:53 +0000 (20:31 +0000)]
Remove krb4 support in gssftp and telnet
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21451
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 20:29:01 +0000 (20:29 +0000)]
Remove krb4 support in the applications. login's ability to run aklog
has been preserved and made unconditional on krb4 support, since aklog
can now do krb5 auth. The config variable is now named krb_run_aklog
(as it was sometimes documented), not krb4_run_aklog as it previously
was.
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21450
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 19:37:51 +0000 (19:37 +0000)]
Remove krb4 support from clients. Some of the code has been
simplified to remove architectural relics of the -4 and -5 options,
but more simplification is likely possible, particularly in kinit.
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21449
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 18:32:44 +0000 (18:32 +0000)]
In the KDC, remove krb4 request handling support and fakeka code
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21448
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 18:30:29 +0000 (18:30 +0000)]
Remove a krb4 conditional block in ktutil_funcs.c which was missed in
the previous commit.
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21447
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 18:26:47 +0000 (18:26 +0000)]
In ktutil, remove code for wst (write srvtab). Reimplement rst (read
srvtab) as an alias for "rkt SRVTAB:filename" and include it
unconditionally.
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21446
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 15 Dec 2008 18:23:58 +0000 (18:23 +0000)]
Remove loadv4/dumpv4 code in kdb5_util. (The command table entries for
this code had already been commented out previously.)
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21445
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Sat, 13 Dec 2008 00:05:33 +0000 (00:05 +0000)]
Fixed memory leak in krb5_stdccv3_remove
Ticket: 6299
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21362
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 12 Dec 2008 18:33:26 +0000 (18:33 +0000)]
Accept digits and = in base64 output to flush
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21330
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 11 Dec 2008 21:07:08 +0000 (21:07 +0000)]
For Sun Studio compilers, set WARN_CFLAGS to emit warning tag names
and make int/ptr mixups a fatal error that will be noticed at build or
"make check" time. Tested in a 32-bit build.
ticket: 6297
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21325
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Tue, 9 Dec 2008 19:32:01 +0000 (19:32 +0000)]
Clean up some kadmind4 relics left behind in osconf.hin
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21300
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Tue, 9 Dec 2008 16:09:18 +0000 (16:09 +0000)]
Release default credentials before exiting krb5_gss_init_sec_context routine
Ticket: 6294
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21298
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Mon, 8 Dec 2008 22:33:07 +0000 (22:33 +0000)]
Add a configure option --disable-rpath to suppress rpath flags in
link lines. Useful for OS distributors and for builds which will
only be used to run the test suite.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21297
dc483132-0cff-0310-8789-
dd5450dbe970
Greg Hudson [Fri, 5 Dec 2008 21:03:25 +0000 (21:03 +0000)]
Remove some lingering Saber C cruft
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21293
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Fri, 5 Dec 2008 21:02:08 +0000 (21:02 +0000)]
When storing info into cred cache, remove any dups.
Ticket: 6291
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21292
dc483132-0cff-0310-8789-
dd5450dbe970
Zhanna Tsitkov [Fri, 5 Dec 2008 20:18:47 +0000 (20:18 +0000)]
Fix data initialization in process_as_req function
Ticket: 6282
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21291
dc483132-0cff-0310-8789-
dd5450dbe970